Qubic Wallet Flaw Exposes Key Recovery Risk Despite Patch
TREE NEWS 보도: Security researchers at SlowMist have found that wallet keys generated by Qubic, a cryptocurrency project focused on AI and distributed computing, could be recovered from just six network samples. The vulnerability, which affects the random stream used to generate account seeds, was partially addressed in the 4.26.4 patch. However, the patch only separates new account seeds from the exposed random stream, leaving the header generation process unchanged—meaning that keys for existing accounts may still be at risk.
The disclosure raises serious concerns about the security of Qubic’s wallet infrastructure and highlights the broader challenges of implementing secure random number generation in blockchain systems. Qubic, which describes itself as an AI-based platform that uses a quorum of computers to perform useful work, has not yet issued a public statement on the matter.
Technical Details and Implications
The vulnerability stems from a predictable random stream used to generate wallet seeds. By collecting just six samples from the network, an attacker could potentially reverse-engineer the random stream and derive private keys. The 4.26.4 patch isolates new account seeds from this stream, but the header generation—which may still rely on the compromised randomness—remains unchanged. This suggests that wallets created before the patch could still be vulnerable.
The issue is particularly concerning because it undermines the fundamental security assumption of wallet key generation: that private keys are unpredictable and cannot be derived from public information. If an attacker can recover keys from network samples, the entire wallet system is compromised. SlowMist has not released full technical details, but the limited information suggests a flaw in the entropy source or the algorithm used to generate randomness.
Industry Analysis and Broader Impact
This incident is a stark reminder of the importance of robust random number generation in cryptocurrency systems. Many blockchain projects rely on deterministic algorithms or weak entropy sources, which can lead to catastrophic key compromises. While the Qubic case is specific to its wallet implementation, it echoes past vulnerabilities in other projects, such as the Android SecureRandom bug that affected Bitcoin wallets in 2013.
For Qubic, the reputational damage could be significant. The project has been positioning itself as a serious player in the AI-crypto space, and a security flaw of this nature may erode trust among users and investors. Moreover, the fact that the patch does not fully address the issue—leaving header generation unchanged—raises questions about the development team’s response and whether they fully understand the root cause.
From a regulatory perspective, such incidents could attract scrutiny from authorities, especially as governments ramp up oversight of crypto security. The incident also underscores the need for independent security audits and bug bounty programs, which are still not universally adopted in the crypto industry.
Forward-Looking Perspective
Qubic will need to provide a transparent explanation of the vulnerability and a clear remediation plan. Users should consider migrating their funds to newly generated wallets if they suspect their keys may be compromised. The project should also undergo a comprehensive security audit to ensure that no other weaknesses exist.
More broadly, this incident should serve as a wake-up call for the crypto industry to prioritize secure random number generation and to adopt best practices for key management. As wallets become the primary interface for users interacting with decentralized applications, their security is paramount. Projects that fail to address these issues risk not only financial losses but also long-term reputational harm.
SlowMist’s disclosure, while troubling, is a valuable contribution to the security community. It highlights the need for continuous vigilance and for researchers to scrutinize even seemingly minor components of blockchain systems. In the end, the strength of a blockchain is only as strong as its weakest link—and in this case, that link appears to be the random number generator.
